ipv6 in sudren شبكة البحث العلمي والتعليم السودنية sudanese research...
TRANSCRIPT
IPv6 in SudREN
السودنية والتعليم العلمي البحث شبكة
Sudanese Research and Education Network
The 4th annual meeting of ASREN,10, 11 Dec. 2014, Muscat, Oman
SudREN at a Glance
SudREN is licensed ISP dedicated to the Sudanese research and educational intuitions.
3 STM-1 (450 Mb) Total Bandwidth to the upstream providers, 63+ Member Institution are connected via Layer-3 MPLS VPN on Local carries
providers (Sudatel, Canar), SudREN has its own Numbering resources from
41.67.0.0/18
197.251.0.0/17
2c0f:fec8::/32
SudREN Network
Member 1
Member 2Member 4
Member 3
Member 63
Internet-Sudatel
200 Mbps150Mbps
SIXP
4 Mbps
PoP1 PoP2
100 Mbps
BGP
OSPF
BGP BGP
OSPF
OSPF
OSPF
OSPF
Fiber
Internet-Canar
BGPBGP BGP
Resource Utilization
• SudREN has a utilized of about 90% of the the 1st block and about70% of the 2nd one.
• SudREN started to put a strategic plan in accordance with the National Migration Plan toward IPv6.
Migration Plan
Network Analysis:Gather information on network infrastructure, key network equipment, servers, appliances and computers.
Define roadblocks:Identify the main challenges and key issues that hinder deploying IPv6.
Workarounds:Develop a plan to migrate to IPv6 with minimum impact on existing critical applications.
Final Plan:Prepare a set of strategies covering IT equipment acquisition, new critical applications, manpower resource planning and network policies to prepare for fully enabled IPv6 Network
Evaluation of IPv6 Readiness
IPv6 Enabled equipment in SudREN
IPv6 Block is already assigned 2c0f:fec8::/32
50% of the POPs Routers
10% of Members Router
100% of Servers
60% of Applications
Deploying IPv6
Steps to deploy IPv6
• Enable IPv6 on the Gateways
Gateway
• Enable IPv6 on SudREN internal Network
Internal Network (DMZ) • Enable IPv6 for
SudREN members
Members’ VPN
IPv6 in the Gateways
• SudREN has a native IPv6 link to the internet via (Sudatel)
• Redundancy Tunnel is also available through
BGP
Internet-Sudatel
PoP1
BGP
IPv6-Link
DMZ
IPv6-Link
IPv6 Addressing
New IPv6 Addressing plan goals• Improving routing aggregation.• Minding future growth with contiguous address space.• Hierarchical allocation “universities & campuses”• Recognizing directly from the IPv6 Address what location/environment a networks belongs to.• Reflect the organization infrastructure..
Each members currently is assigned /48 IPv6 Address block, and reserved /40 for
future demand.
SudREN started putting a strategy to extend its IPv6 block.
Achievements
Challenges
• Coordination with upstream providers,
• IPv6 is not supported in most members’ routers,
• No Redundancy for IPv6 Connectivity in Our POPs,
• IPv6 is not fully supported in both POPs Firewalls.
السودنية والتعليم العلمي البحث شبكة
Sudanese Research and Education Network
Sami SalihSudREN, CEO
d